unified-security

Audit codebases for OWASP Top 10 and ASVS 5.0 security vulnerabilities.

Updated Mar 22, 2026
One-click install
npx skills add https://github.com/selimerunkut/opencode-unified-security-skill --skill unified-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: unified-security
Source: https://github.com/selimerunkut/opencode-unified-security-skill/tree/main/unified-security
Command: npx skills add https://github.com/selimerunkut/opencode-unified-security-skill --skill unified-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for comprehensive security audits and implementation guidance for codebases, ensuring adherence to OWASP Top 10 and ASVS 5.0 standards, and protecting against AI/agent workflow risks.

Core Features & Use Cases

  • Security Auditing: Identifies and mitigates security vulnerabilities in code.
  • Implementation Guidance: Provides best practices for secure authentication, authorization, and session handling.
  • AI/Agent Workflow Security: Detects and mitigates risks associated with AI/agent workflows in CI/CD.
  • Use Case: Integrate this Skill into your coding or auditing process to ensure your applications are secure against the latest threats.

Quick Start

Use the unified-security skill to review this repo for auth and secrets issues.

Frequently Asked Questions about unified-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for OWASP Top 10 vulnerabilities?

To secure AI agent workflows in CI/CD, you need to detect and mitigate specific risks associated with AI integrations using security auditing standards. This involves reviewing the codebase to identify vulnerabilities introduced by AI workflows and applying ASVS 5.0 best practices.

Can I perform security code reviews without installing external dependencies?

Yes, you can perform security code reviews without external dependencies by using tools that rely on built-in Python libraries for parsing and analysis. This allows you to identify security vulnerabilities and audit codebases without complex environment setup.

What is the best way to implement secure authentication and session handling?

The best way to implement secure authentication and session handling is by following implementation guidance based on ASVS 5.0 standards. Security auditing tools can provide best practices and verify that your codebase mitigates related vulnerabilities effectively.

How do I check my code for ASVS 5.0 compliance?

To check your code for ASVS 5.0 compliance, run a security audit that parses your codebase against ASVS 5.0 requirements. This identifies security vulnerabilities and provides implementation guidance for secure coding practices.

When do I need to audit AI agent workflows for security risks?

You need to audit AI agent workflows for security risks when integrating AI into your CI/CD pipelines or codebase. Auditing detects and mitigates specific vulnerabilities associated with AI workflows, ensuring application security against the latest threats.